METHOD FOR IMPLEMENTING SECURE TRANSACTION 
FOR ELECTRONIC DEPOSIT (PURSE) 



Cross Reference to Related Application 

This is a continuation application of PCT/CN99/00124, filed August 23, 1999, 
which is incorporated herein by reference in its entirety. 

Field of the Technology 

5 The present invention relates generally to IC cards useful for financial 

applications, such as electronic deposits (bankbook) or electronic purses, and more 
particularly to methods for secure authentication of electronic deposits (purse) for 
transactions before a sale. 

Background of the Invention 

10 At present, IC card applications are gaining in popularity and scope. Because IC 

cards are convenient to use, easy to carry, fast to operate and reliable for security 
purposes, etc., they are welcomed by more and more users, especially in self-service 
environments. 

Nevertheless, payment systems of present IC cards are primarily directed to 
15 transactions after a sale, i.e., the user pays first, and then receives the services, e.g., 

shopping at store. For transactions before the sale, i.e., the payer receives the services 
first and then pays, e.g., refueling oil with an IC card, various factors render the use of 
such cards unsafe from a security standpoint, especially for services provided before 
the sale in self-service environments. 
20 For example, when using current IC cards to refuel, the user inserts the IC card 

into a designated terminal. Both the IC card and the card terminal are mutually 
authenticated. The user refuels oil. After refueling is ended, the card terminal 
deducts money from the IC card. As can be seen from this procedure, during the 
period from when the user begins to refuel oil until the card terminal deducts money 
25 successfully, if the IC card is extracted from the card terminal or the power supply is 
interrupted or the card terminal has some accident, etc., then the card terminal does 
not deduct money from the IC card (known as escape card). This will cause a series 
of problems. 
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In order to solve this problem, a Grey Lock concept has been introduced to IC 
card refueling payment systems. The term Grey Lock indicates that a specific Mark is 
present on the IC card to identify its application state as of the last time the card was 
used. If the Grey Lock Mark is clear, this means the last transaction using the card 
5 was ended under normal circumstances and the card is ready to be used again. If the 
Grey Lock Mark is set, this means that the last transaction was not ended under 
normal circumstances. For this IC card (known as a grey or Grey Card) to be used 
again, its Grey Lock Mark must be cleared (also referred to as unlocking grey or 
unlocking Grey for short). Further, if the money which should have been deducted in 

10 the last transaction has not been deducted from the card, then a Supplementary Debit 
must be applied to the card. 

Therefore, the procedures associated with a refueling transaction using an IC 
card as described above are changed to the following steps. The user inserts the card 
into a terminal. Both the IC card and the card terminal are mutually authenticated. 

15 The card terminal judges whether the card is a grey card. If the card is not a grey 
card, then the grey lock is set. The user can then refuel oil. After refueling is 
complete, the card terminal deducts money from the IC card and the card terminal 
unlocks the grey lock on the IC card. At the same time, an unlocking grey transaction 
is added. This procedure is as follows. If the IC card is a grey card, then the card 

20 terminal searches for a corresponding grey record. The card terminal judges whether 
the grey record matches with the one on the IC card. If grey records are matched, 
then supplementary debit is done (if necessary) according to the grey record, and the 
card terminal unlocks the grey lock on the IC card. 

In the transaction procedures described above, the supplementary debit operation 

25 and unlocking grey operation are separate. Thus there can still be hidden security 
problems. For example, if there is only an unlocking grey operation without a 
supplementary debit operation, then the cardholder makes a profit and the card 
distributor realizes a loss. Herein, the "transaction beneficiary" concept is introduced 
for further description. 

30 According to the beneficiary concept of an unauthorized IC card operation, the 

transaction (or IC card operation) is divided into a positive transaction and a negative 
transaction. Positive transactions (or IC card operations) include those transactions 
(or IC card operations) which are advantageous to the cardholder and are 
disadvantageous to the card distributor, including unauthorized operations such as, 
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e.g., load, changing the limit of an overdrawn account, unlocking the personal 
identification number (PIN), updating protected files on the IC card, and the like. 
Negative transactions (or IC card operations) include those transactions (or IC card 
operations) Which are disadvantageous to the cardholder and advantageous to the card 
5 distributor, including unauthorized operations such as, e.g. consumption, and the like. 
In general, for positive transactions, an encryption key is kept at a card distributor 
computer. For negative transactions, an encryption key is kept at a card terminal, and 
is conventionally stored on the card terminal PS AM card. 

According to the above definitions of positive transaction and negative 

10 transaction, it can be seen that a debit operation is a negative operation. An 

encryption key can be stored on a PS AM card. It can also be seen that an unlocking 
grey operation is a positive operation, such that an encryption key should be stored in 
the card distributor computer. Nevertheless, an unlocking grey operation, which 
cannot be on-line, has to occur in a normal transaction procedure, so that the 

15 following conflict can happen. If the encryption key of the unlocked grey is put on a 
PSAM card, then it is possible that the PS AM card will be illegally used for unlocking 
grey. Because the PSAM card is only an IC card, which only calculates and 
authenticates passively with an encryption key, there is no mechanism to limit the 
unlocking operation. 

20 In current state-of-the-art procedures, the encryption key for unlocking a grey 

card is put in a card terminal encryption module. Alternatively, part of the encryption 
key for unlocking a grey card is put on the card terminal encryption module and part 
of it is put on the card terminal PSAM card. A program can be put on the encryption 
module so as to impart some autonomy thereto. The program can be used to secure 

25 control of the unlocking grey operation. For the encryption module to have secure 

control of the unlocking grey operation, it is necessary to lock the card before service, 
i.e., to set the grey lock mark of the IC card. If the card happens to escape the system 
during operation, the card terminal will report by network the escaped (or lost) 
amount of money and present balance of the card. During the next unlocking grey 

30 operation, a supplementary debit can be applied when the grey lock mark is set and 
the escaped amount of money and balance has been sent back by the network. After 
that the IC card grey lock mark can be reset. 

There are also problems with this as well. For example, the IC card cannot judge 
whether the supplementary debit is legal. Only the card terminal and network can 
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secure a guarantee of the supplementary debit. This is a weak point of security. In 
addition, as noted above, the unlocking operation is a positive transaction. The 
encryption key is within an application environment such as the IC card, which cannot 
be controlled by the card distributor. 
5 Up till now, there is no thorough solution for this specific transaction before sale 

of the IC card. 

Summary of the Invention 

It can be seen from above the analysis that the source of the problem is that debit 
operations and unlocking operations are mutually independent. The conventional 
10 solution is to set up certain relationships between these two operations. In contrast, 
the present invention combines these two operations, namely, debit and unlocking, 
together to form a new method for securing a transaction before a sale for an 
electronic deposit. 

The method of the invention combines a grey lock mark into the electronic 

15 deposit (purse), and the grey lock mark becomes one of attribute parameters of the 
electronic deposit (purse). When the grey lock mark is set, any operation is invalid 
except operations related to resetting the grey lock mark. 

In the invention, when the operation is IC card locking, i.e., a grey lock mark is 
being set, the source of the locking card is written on the IC card simultaneously. 

20 When the operation is a debit operation, the source of the locking card is judged and a 
debit operation and unlock grey operation are merged into a one step operation, i.e., 
after the debit is successfully applied, the grey lock is unlocked automatically. The 
source of the locking card exists in the entire transaction procedure. 

According to the invention, a computer can further keep an encryption key for 

25 implementing a debit operation and a mandatory unlock operation. This allows a grey 
lock IC card to implement a supplementary debit operation and a mandatory unlock 
grey operation on an on-line card terminal. For example, suppose there is a failure in 
the card terminal, so that a debit cannot be made, or data cannot be sent up, or a 
record of this transaction has been lost. Then the grey lock mark of the card can be 

30 reset with an on-line mode by an on-line card terminal. 

The IC card consumption transaction procedure of the invention is changed as 
follows. An user inserts a card in a terminal. Both the IC card and the card terminal 
are mutually authenticated. The card terminal sets a grey lock on the IC card. The 
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transaction is completed. After the transaction is ended, the card terminal debits from 
an electronic deposit (purse) on the IC card and unlocks grey the IC card. 

In the locking grey IC card operation above, the IC card creates an authentication 
code with a locking card source, and transfers the locking card source parameters to 
5 the card terminal. The card terminal creates another locking card source with the 
same mechanism of the IC card. The card terminal then creates another 
authentication code with this other locking card source, and transfers this other 
authentication code to the IC card. The IC card compares these two authentication 
codes to see whether they are identical. If the two authentication codes are identical, 
10 the IC card initiates the locking operation and returns this grey lock characteristic 
code, made by the locking card source and card terminal corresponding data, to the 
card terminal. 

The operation of debiting from electronic deposit and unlocking grey lock on the 
IC card above includes that the card terminal makes an authentication code with a 

15 locking card source and debit parameters and sends this authentication code and 

corresponding parameters to the IC card. The IC card makes another authentication 
code with its internal locking card source, with same parameters and same 
mechanism, and judges whether these two authentication codes are identical. If they 
are identical, the card terminal debits against electronic deposit on the IC card. If this 

20 is successfully done, then the card terminal clears the grey lock mark simultaneously. 
Further, the card terminal can save the grey lock record of this time. Among 
them, part of the grey lock record includes the authentication code needed for 
debiting, the amount of the escape card of this time and the grey lock characteristic 
code together. The card terminal can send the grey lock record of this time up to a 

25 central computer. The next time an IC card, with an incomplete transaction ending 

and an in-debit grey lock, is used in a card terminal with the grey lock record, the card 
terminal first authenticates the grey lock characteristic code to confirm that locking 
card source of the IC card is same as the locking card source that is used to calculate 
the debit authentication code of the grey lock record. After confirming the same, the 

30 debit and unlocking operation are executed. 

According to the invention, the locking card source is a procedure encryption 
key SESPK, which correlates with at least a temporarily created pseudo random 
number ICC. 
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In the procedure encryption code, noted above, SESPK = 3DES (DPK, DATA), 
where DPK is a consumption encryption key that is made with a discrete IC card 
application sequence number by a consumption main encryption key MPK of an 
electronic deposit. As each IC card has a different application sequence number, the 
5 DPK of each IC card is different as well. DATA is a specific parameter including 
said temporary pseudo random number ICC, the transaction sequence number of the 
electronic deposit (purse) CTC and the last two bytes of the card terminal transaction 
sequence number TTC. It can be seen that each transaction SESPK is different as the 
IC card application sequence number and DATA are different. Thus SESPK can be 

10 used as a reliable locking card source. 

When locking an electronic deposit (purse), the card terminal sends the card 
terminal a transaction sequence number TTC to the IC card. The IC card gets its own 
pseudo random number ICC and the transaction sequence number of the electronic 
deposit (purse) CTC. An internal procedure encryption key SESPK is created and 

15 corresponding parameters that make the procedure encryption key and grey lock 

characteristic code of this time are recorded. The pseudo random number ICC and the 
transaction sequence number of the electronic deposit (purse) CTC are sent to the card 
terminal. The card terminal secures the authentication module or the PS AM card has 
a consumption main encryption key of the electronic deposit (purse) MPK, according 

20 to the IC card application sequence number, and they deduce an IC card electronic 
deposit (purse) DPK. Further, according to the pseudo random number ICC, the 
transaction sequence number of the electronic deposit (purse) CTC and the card 
terminal transaction sequence number TTC, a same procedure encryption key SESPK 
is created using the same mechanism of the IC card. 

25 When debiting, the card terminal calculates the authentication code by using the 

procedure encryption key SESPK, the debit amount, the operation date and time etc., 
which are also sent to the IC card. In the IC card, with the same data and same 
algorithm another authentication code is internally calculated. If these two 
authentication codes are identical, then the IC card implements debiting and 

30 unlocking internally. If these two authentication codes are different, then no internal 
operation of debiting and unlocking are taken, an internal error counter is incremented 
and an error code is returned. If the internal error counter reaches a certain number, 
then the IC card is internally locked to prevent further actions. 
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The invention, which combines grey lock mark with electronic deposit to form a 
specific refueling electronic deposit, can include conventional functions such as read 
balance, load, unload, consumption/withdrawal, change limit of overdrawn account, 
etc., as well as the functions of refueling debit, local unlocking grey and on-line 
5 unlocking grey. 

There are new refueling electronic deposit states in the invention such as pre- 
refueling state, grey lock state and unlocked grey lock state, as well as conventional 
states such as idle state, load state, consumption/withdrawal state, unload state and 
update state. Also, in addition to conventional commands set, the invention includes 

10 new commands such as INITIALIZE FOR REFUEL, LOCK FOR REFUEL, DEBIT 
FOR REFUEL, INITIALIZE FOR UNLOCK, DEBIT FOR UNLOCK and GET 
GREY STATUS commands. The INITIALIZE FOR REFUEL command is used for 
initializing refueling transaction. The LOCK FOR REFUEL command is used for 
locking refueling electronic deposit with grey lock. The DEBIT FOR REFUEL 

15 command is used for local refueling and unlocking grey transaction simultaneously. 
The INITIALIZE FOR UNLOCK command is used for initializing on-line unlocking 
grey transaction. The DEBIT FOR UNLOCK command is used for on-line unlocking 
grey and making supplementary debit of refueling transaction simultaneously. The 
GET GREY STATUS command is used for reading grey lock state and launching 

20 local unlocking grey transaction. 

By using the invention technical scheme, problems in the past are thoroughly 
solved. 

As both the unlocking grey operation and the debit operation are combined into 
one operation, hidden troubles of grey lock management during normal unlocking 

25 operation no longer exist and they can be put on PSAM according to the negative 
transaction principle. When on-line unlocking, the encryption key is put in the 
computer according to the positive transaction principle, and its hidden trouble of 
management also no longer exists. 

As both the unlocking grey operation and the debit operation are combined into 

30 one operation, on the one hand, illegal unlocking grey problems are transformed to 
correctness problem of card terminal debiting, i.e., once card terminal debiting is 
legal, then unlocking is also legal. On the other hand, when a supplementary debit 
happens after a card escapes, because only the IC card and the PSAM of the card 
terminal, where the card has escaped, know the procedure encryption key SESPK 
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used for this supplementary debit, and the card terminal PSAM does not keep SESPK 
after the transaction is ended, during supplementary debit only the IC card knows 
(internally recovering) this encryption key. During the supplementary debit, the 
debiting authentication key is the one calculated by the card terminal PSAM before 
5 SESPK is deleted, and any illegal updating the SESPK or its calculating parameters 
(such as amount of escape card etc.) will cause failure of supplementary debit, and at 
the same time internal application locking mechanism of IC card can prevent misuse. 
Therefore it is transformed to IC card security mechanism problem with no 
relationship with the application. 
10 In summary, the unlocking grey problem is transformed to a reliability problem 

of the card terminal and the IC card. Tthese can be controlled effectively, and there 
are no conflicts with present security mechanisms of card terminals and IC cards. 

Brief Description of the Drawings 

Figure 1 is a refueling transaction procedure for electronic deposit in accordance 
15 with an embodiment of the invention. 

Figure 2 is an on-line unlocking grey transaction procedure for electronic deposit 
in accordance with an embodiment of the invention. 

Figure 3 is a local unlocking grey transaction procedure for electronic deposit in 
accordance with an embodiment of the invention. 

20 Embodiments of the invention 

The present invention now will be described more fully hereinafter with 
reference to the accompanying drawings, in which preferred embodiments of the 
invention are shown. This invention may, however, be embodied in many different 
forms and should not be construed as limited to the embodiments set forth herein; 

25 rather, these embodiments are provided so that this disclosure will be thorough and 
complete, and will fully convey the scope of the invention to those skilled in the art. 
Like numbers refer to like elements throughout. 

Using a payment system for refueling oil as an example, the present invention 
combines electronic deposit with grey lock to form a special electronic deposit known 

30 as a refueling electronic deposit. The refueling electronic deposit has a refueling debit 
function, a local unlocking grey function and an on-line unlocking grey function, as 
well as general electronic deposit functions, such as read balance, load, unload, 
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consumption/withdrawal and change limit of overdrawn account etc. Refueling debit, 
local unlocking grey and on-line unlocking grey are new functions, and are described 
in detail in the following. 

During use a card is in one state, and in specific states, only some commands can 
5 be executed. The card has the following states: idle, load, consumption/withdrawal, 
unload, update, pre-refueling, grey lock and unlock grey. Among these pre-refueling, 
grey lock and unlock grey are specific states for refueling electronic deposit. 

When an usage of an IC card has been selected, first the card enters idle state. 
After receiving a command from a card terminal, the card must check whether the 
10 command is allowed for the present state. If the command is executed successfully, 
then the card enters another state (or the same state) as shown in table 1. If the 
command is not executed successfully, then the card enters idle state. 

Table 1 shows the state changes after successful execution. The first row 
includes the states present when the command is issuing, the first column includes the 
15 commands to be issued and the whole table shows the states after a command is 
successfully executed. 

The shaded part of table 1 shows a state where a command to the card is not 
available (N/A). This means that the card does not execute the command and gives as 
the response a "6901" state, i.e., don't accept command state (N/A), to the card 
20 terminal. As the command cannot be executed, if the card is originally at the grey 
lock state, then the result is the card remains at the grey lock state. If the card is 
originally at any of the other states, then the result is the card is at the idle state. 
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Table 1 State changes after command is successfully executed. 



State 



Command 



Idle 



Load 



C/W 



Jnload 



Jpdate 



Load 



Consumption/withd 
rawal 



PR 



Unload 



Read balance 



idle 



load 



C/W 




unload 



Update 



Lock 



Jnlock 



unlock 



Transaction 
authentication 



idle 



load 



C/W 



unload 



Update 



RC 



lock 



unlock 



Load initialization. 



Consumption 
initialization 



Load 



Withdrawal 
initialization 



Unload 
initialization. 



unload 



unload 



Update 
initialization. 



update 



Change limit of 
overdraw 



INITIALIZE FOR 
REFUEL. 



Refueling & 
locking 



Refueling 
consumption 



INITIALIZE FOR 
UNLOCK. 




10 



15 



Unlocking 



GET GREY 
STATUS 



In table 1 above, C/W represents Consumption/Withdrawal, PR represents Pre- 
refueling, RC represents Refueling consumption, lock represents locking grey, and 
unlock represents unlocking grey. 

Table 2 defines command type, code of command byte and parameters PI and P2 
used for refueling electronic deposit. In the command set, in addition to the general 
commands of electronic deposit, some specific commands are added: INITIALIZE 
FOR REFUEL, LOCK FOR REFUEL, refuel, INITIALIZE FOR UNLOCK, 
unlocking grey and GET GREY STATUS. The INITIALIZE FOR REFUEL 
command is used for initializing refueling debit transaction. The LOCK FOR 
REFUEL command is used for locking grey refueling electronic deposit. The refuel 
command is used for local refueling oil transaction and unlocking grey 
simultaneously. The unlocking Initialization command is used for initializing on-line 
unlocking grey transaction. The unlocking grey command is used for on-line 
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unlocking grey transaction and supplementary debit simultaneity. The GET GREY 
STATUS command is used to read grey lock state. 

Table 2 Command type byte and instruction bytes 



Command 


CLA 


INS 


PI 


P2 


Update PIN 


80 


5E 


01 


00 


Load 


80 


52 


00 


00 


Consumption/withdrawal 


80 


54 


01 


00 


Unload 


80 


54 


03 


oo ! 


Read balance 


80 


5C 


00 


ox 


Transaction authentication 


80 


5A 


00 


XX 


Withdrawal initialization 


80 


50 


02 


01 


Load initialization 


80 


50 


00 


ox 


Consumption initialization 


80 


50 


01 


ox 


Unload initialization 


80 


50 


05 


oi ! 


Change overdrawn limit initialization 


80 


50 


04 


01 


Reload PIN 


80 


5E 


00 


00 


Change overdrawn limit 


80 


58 


00 


00 


* INITIALIZE FOR REFUEL 


E0 


50 


01 


01 


* Refueling and locking 


E0 


50 


02 


01 


* Refueling consumption 


E0 


54 


01 


00 


* INITIALIZE FOR UNLOCK 


E0 


50 


03 


01 


* Unlocking 


E0 


54 


01 


01 


* GET GREY STATUS 


E0 


50 


04 


01 



In the following, each of the new commands is described in detail. 
1. INITIALIZE FOR REFUEL command: 

The INITIALIZE FOR REFUEL command is used for initializing a refueling 
debit transaction. Its command message is shown in table 3, the data field of the 
command message is shown in table 4, and the response message data field of 
successful execution is shown in table 5. If the command is unsuccessfully executed, 
then only the response message SW1 and SW2 is sent back. If the command is 
successfully executed, the state code of the response message is "9000". Table 6 lists 
the possible error states, sent by the IC card, where ED is refueling electronic deposit. 
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Table 3 INITIALIZE FOR REFUEL command message 



Code 


Value 


CLA 


EO 


INS 


50 


PI 


01 


P2 


01 used for refueling, others reserved 


L c 


OB 


Data 


See table 4 


L e 


10 



Table 4 INITIALIZE FOR REFUEL command message data field 



Description 


Length (bytes) ! 


Encryption key index 


1 


Terminal number 


6 


Terminal transaction sequence number 


4 



Table 5 INITIALIZE FOR REFUEL response message data field 



Description 


Length (bytes) 


ED balance 


4 


ED off-line transaction sequence number 


2 


Encryption key version 


1 


Algorithm identifier 


1 


Pseudo random number (ICC) 


1 


MACl 


4 



Table 6 INITIALIZE FOR REFUEL error states 



SW1 


SW2 


Description 


69 


01 


Command unaccepted (invalid state i.e. grey lock source has been 
created) 


65 


81 


Memory error j 


69 


85 


Use condition unsatisfied 


94 


03 


Encryption key index unsupported 


94 


02 


Transaction counter at maximum 



2. LOCK FOR REFUEL command: 

The LOCK FOR REFUEL command is used for locking grey refueling 
electronic deposit. Its command message is shown in table 7, the data field of the 
command message is shown in table 8, and the response message data field of 
successful execution is shown in table 9. If the command is unsuccessfully executed, 
then only the response message SW1 and SW2 is sent back. If the command is 
successfully executed, the state code of the response message is "9000". Table 10 
lists the possible error states sent by the IC card. 
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Table 7 LOCK FOR REFUEL command message 



Code 


Value 


CLA 


EO | 


INS 


50 


PI 


02 


P2 


01 


L c 


OB 


Data 


See table 8 


Le 


08 



Table 8 LOCK FOR REFUEL command message data field 



Description 


Length (bytes) 


Transaction date (terminal) 


4 


Transaction time (terminal) 


3 


MAC2 


4 



Table 9 LOCK FOR REFUEL response message data field 



Description 


Length (bytes) 


TAC 


4 


MAC3 


4 



Table 10 LOCK FOR REFUEL error states 



SW1 


SW2 


Description 


69 


01 


Command unaccepted (invalid state) ! 


65 


81 


Memory error 


69 


85 


Use condition unsatisfied 


93 


02 


MAC invalid 



10 3. DEBIT FOR REFUEL command: 

The DEBIT FOR REFUEL command is used for a local refueling oil debit 
transaction and unlocking grey simultaneously. Its command message is shown in 
table 11, the data field of the command message is shown in table 12, and the 
response message data field of successful execution is shown in table 13. If the 

15 command is unsuccessfully executed, then only the response message SW1 and SW2 
is sent. If the command is successfully executed, the state code of response message 
is "9000". Table 14 lists the possible error states sent by the IC card. 
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Table 1 1 DEBIT FOR REFUEL command message 







CLA 


EO 


INS 


54 


PI 


01 


P2 


00 


L c 


19 


Data 


See table 12 


L e 


08 



Table 12 DEBIT FOR REFUEL command message data field 



Description 


Length (bytes) 


Transaction amount 


4 


ED off-line transaction sequence number 


2 


Terminal number 


6 


Terminal transaction sequence number 


4 


Transaction date (terminal) 


4 


Transaction time (terminal) 


3 


GMAC 


4 



Table 13 DEBIT FOR REFUEL response message data field 



Description 


Length (bytes) 


TAC 


4 


MAC4 


4 



Table 14 DEBIT FOR REFUEL error states 



SW1 


SW2 


Description 


69 


01 


Command unaccepted (invalid state) 


65 


81 


Memory error 


69 


85 


Use condition unsatisfied 


67 


00 


Length error 


93 


02 


MAC invalid 



4. INITIALIZE FOR UNLOCK command: 

The INITIALIZE FOR UNLOCK command is used for initializing on-line 
unlocking grey transactions. Its command message is shown in table 15, the data field 
of the command message is shown in table 16, and the response message data field of 
successful execution is shown in table 17. If the command is unsuccessfully 
executed, then only the response message SW1 and SW2 is sent back. If the 
command is successfully executed, the state code of the response message is "9000". 
Table 18 lists the possible error states sent by the IC card. 
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Table 15 INITIALIZE FOR UNLOCK command message 



Code 




CLA 


EO 


INS 


50 


PI 


03 


P2 


01 for refueling transaction, others reserved 


Lc 


07 


Data 


See table 16 


L e 


10 



Table 16 INITIALIZE FOR UNLOCK command message data field 



Description 


Length (bytes) 


Encryption key index 


1 


Terminal number 


6 



Table 17 INITIALIZE FOR UNLOCK response message data field 



Description 


Length (bytes) 


ED balance 


4 


ED off-line transaction sequence number 


2 


Encryption key version 


1 


Algorithm identifier 


1 


Pseudo random number (ICC) 


4 


MACl 


4 



Table 18 INITIALIZE FOR UNLOCK error states 



SW1 


SW2 


Description 


69 


01 


Command unaccepted (invalid state i.e. grey lock has not been 
created) 


65 


81 


Memory error j 


69 


85 


Use condition unsatisfied 


94 


03 


Encryption key index unsupported 1 


94 


02 


Transaction counter at maximum 



5. DEBIT FOR UNLOCK command: 

The DEBIT FOR UNLOCK command is used for on-line unlocking grey 
transaction and supplementary debit simultaneously. Its command message is shown 
in table 19, the data field of the command message is shown in table 20, and the 
response message data field of successful execution is shown in table 21. If the 
command is unsuccessfully executed, then only the response message SW1 and SW2 
is sent back. If the command is successfully executed, the state code of the response 
message is "9000". Table 22 lists the possible error states sent by the IC card. 
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Table 19 DEBIT FOR UNLOCK command message 



Code 


T aiuc 


CLA 


EO 


INS 


54 


PI 


01 


P2 


01 


L c 


OF 


Data 


See table 20 


L e 


04 



Table 20 DEBIT FOR UNLOCK command message data field 



Description 


Length (bytes) 


Transaction amount 


4 


Transaction date (computer) 


4 


Transaction time (computer) 


3 


MAC2 


4 



Table 21 DEBIT FOR UNLOCK response message data field 



Description 


Length (bytes) 


MAC3 


4 



Table 22 DEBIT FOR UNLOCK error states 



SW1 


SW2 


Description 


69 


01 


Command unaccepted (invalid state) 


65 


81 


Memory error 


69 


85 


Use condition unsatisfied 


67 


00 


Length error 


93 


02 


MAC invalid 



6. GET GREY STATUS command: 

The GET GREY STATUS command is used to get grey lock state. Its command 
message is shown in table 23, there is no data field of the command message, and the 
response message data field of successful execution is shown in table 24. If the 
command is unsuccessfully executed, then only the response message SW1 and SW2 
is sent back. If the command is successfully executed, the state code of the response 
message is "9000". Table 25 lists the possible error states sent by the IC card. 
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Table 23 GET GREY STATUS command message 



Code 


Value 


CLA 


EO 


INS 


50 


PI 


04 


P2 


01 


L c 


Non-existence 


Data 


Non-existence 


L e 


11 



Table 24 GET GREY STATUS response message data field 



Description 


Length (bytes) 


Grey flag 


1 1 


ED balance 


4 


ED off-line transaction sequence number 


2 | 


ED on-line transaction sequence number 


2 


MAC3 


4 


TAC 


4 



MAC3 and TAC are return value from IC card when grey lock. 
Table 25 GET GREY STATUS error states 



SW1 


SW2 


Description \ 


69 


01 


Command unaccepted (invalid state) 


65 


81 


Memory error 


69 


85 


Use condition unsatisfied 


67 


00 


Length error 



10 The transaction procedures of the extended applications of refueling, local 

unlocking grey and on-line unlocking grey are described in detail. 

1. Refueling transaction: 

This procedure allows a cardholder to use refueling electronic deposit to refuel at 
15 an IC card refueling machine. The transaction can be an off-line transaction. The 
refueling transaction asks for a personal identification number (PIN). The procedure 
is also illustrated in Fig. 1, as follows: 

step 1.1: card terminal issues an INITIALIZE FOR REFUEL command to start 
20 refueling transaction. 

Step 1.2: after receiving INITIALIZE FOR REFUEL command, the IC card 
deals with the command, including: 
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(1) check whether the IC card is in a grey lock state, if it is, return state code 
"690 1" (unsupported encryption key index) without other data; 

(2) check whether encryption key index included in the command is supported 
by the IC card, if it is not supported, return state code "9403" (unsupported encryption 

5 key index) without other data; 

(3) after passing above checks, the IC card will makes a pseudo random number 
ICC, a procedure encryption key SESPK and a message authentication code MAC1. 
The SESPK is used for refueling transaction of refueling electronic deposit. The 
SESPK is formed by SESPK = 3DES (DPK, DATA), where DPK is the consumption 

10 encryption key of refueling electronic deposit, DATA includes: a pseudo random 
number ICC, an off-line transaction sequence number CTC of refueling electronic 
deposit, the last two bytes of card terminal transaction sequence number TTC and 
3DES is triple length of DES algorithm. 

SESPK works with the following data in sequence to calculate MAC1: 
15 — balance of refueling electronic deposit; 

transaction type identifier ("10" for refueling transaction); 

— card terminal number (the card terminal which issues LOCK FOR REFUEL 
command). 

20 Step L3: authenticating MAC1. 

With the pseudo random number ICC and off-line transaction sequence number 
of refueling electronic deposit returned by the IC card, the refueling security 
authentication module PS AM makes a procedure encryption key SESPK and 
authenticates MAC1; if MAC 1 is valid, then next step is step 1.5, otherwise step 1.4. 

25 

Step 1.4: send back error state, card terminal should stop refueling. 
Step 1.5: calculating MAC2. 

After the card terminal validates that the refueling transaction can proceed, a 
30 message authentication code MAC2 is created for the IC card to validate PS AM. 
SESPK works with the following data in sequence to calculate MAC2: 

— transaction type identifier ("10" for refueling transaction); 

— card terminal number (the card terminal which issues LOCK FOR REFUEL 
command); 
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— transaction date (the card terminal which issues LOCK FOR REFUEL 
command); 

— transaction time (the card terminal which issues LOCK FOR REFUEL 
command). 

Step 1.6: card terminal issues LOCK FOR REFUEL command. 
Step 1.7: authenticating MAC2. 

After receiving a LOCK FOR REFUEL command, the IC card will authenticate 
MAC2; if it is valid, then the next step is step 1.8, otherwise returns error state "9302" 
(MAC is invalid) to the card terminal. 

Step 1.8: LOCK FOR REFUEL command processing. 

IC card writes the pseudo random number ICC, card terminal number, card 
terminal transaction sequence number, transaction date and transaction time to an 
internal file, in order to recover IC card data if power supply is interrupted during 
refueling; sets refueling electronic deposit in grey lock state; except DEBIT FOR 
REFUEL and DEBIT FOR UNLOCK commands, inhibits IC card operations (such as 
load, unload, consumption/withdrawal, and change limit of overdrawn account etc.), 
which will change balance of refueling electronic deposit. When card terminal issues 
these inhibited commands, an error state "6989" (card has been locked) will be 
returned to the card terminal. 

The off-line transaction sequence number of refueling electronic deposit is 
incremented by the IC card. 

The IC card makes a message authentication code MAC3 for PS AM to check 
whether the IC card is legal, and writes MAC3 into an internal file at the same time. 
MAC3 is included in the response message of the LOCK FOR REFUEL command 
and the response message of the GET GREY STATUS command, which are 
transferred from the IC card to the PSAM (through the card terminal). SESPK works 
with the following data to calculate MAC3: 

— balance of refueling electronic deposit; 

— off-line transaction sequence number (before incremented) of refueling 
electronic deposit; 

— transaction type identifier ("10" for refueling transaction); 
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— card terminal number (the card terminal which issues LOCK FOR REFUEL 
command); 

— transaction date (the card terminal which issues LOCK FOR REFUEL 
command); 

— transaction time (the card terminal which issues LOCK FOR REFUEL 
command). 

With the same mechanism, the IC card makes a transaction signature TAC by 
using the transaction authentication encryption key DTK directly, and writes TAC 
into an internal file at the same time. TAC is included in the response message of the 
LOCK FOR REFUEL command and the response message of the GET GREY 
STATUS command, which are transferred from the IC card to the PS AM (through the 
card terminal). If an exception happens such as an escape card, it is impossible for the 
transaction to go on. Then TAC will be written into the card terminal transaction 
itemized list in order to transfer to the computer the transaction authentication for the 
locked grey card. The following are the main elements to make TAC: 

balance of refueling electronic deposit; 

— off-line transaction sequence number (before incremented) of refueling 
electronic deposit; 

— transaction type identifier; 

— card terminal number; 

— transaction date (card terminal); 

— transaction time (card terminal). 

Step 1.9 Authenticating MAC3. 

The card terminal authenticates the validation of MAC 3. If it is valid, then 
transaction processing goes to step 1.10, otherwise the card terminal will make an 
exception processing. 

Step 1.10 Cardholder refueling. 

During refueling, the IC card is allowed to power-off. After power-off, the IC 
card can be inserted again. After transaction makes preprocessing (authenticating 
encryption code, selecting application), step 1.11 can be executed continually. 

Step 1.11 Making GMAC. 
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The refueling consumption secure authentication module PS AM makes a 
message authentication code GMAC with the procedure encryption key SESPK for 
the IC card to authenticate whether the PS AM is legal. 

SESPK works with the following datum to calculate GMAC: 
5 — refueling transaction amount. 

Step 1.12 Card terminal issues a DEBIT FOR REFUEL command. 

Step 1.13 Authenticating GMAC. 
10 After receiving the DEBIT FOR REFUEL command, the IC card first 

authenticates whether the proposed off-line transaction sequence number of the IC 
card is matched. If it is unmatched, then an error returns without affecting the error 
counter. 

Secondly, the IC card authenticates whether the GMAC is valid. If it is valid, 
15 then transaction processing executes step 1.14 continually. If it is invalid, then an 
error statement "9302" (MAC invalid) is returned to the card terminal and the error 
counter in the IC card is decreased at the same time. When the error counter is zero, 
the IC card is locked permanently in order to prevent misuse. 

20 Step 1.14 Transaction processing. 

The IC card subtracts the refueling transaction amount from the refueling 
electronic deposit balance and recovers the refueling electronic deposit state from the 
grey lock state to the normal state. The IC card must perform all of the steps above 
completely or without performing any step. If the balance update or refueling 

25 electronic deposit recovery state are unsuccessful, then the transaction itemized list 
should not be revised also. 

The IC card creates a message authentication code MAC4 for the PSAM to 
check whether the IC card is legal. The MAC4 is included in the response message of 
the REFUEL command sent from the IC card to the PSAM (through the card 

30 terminal). DPK works in the data as shown below, as calculation inputs, for 
calculating MAC4: 

— amount of refueling transaction; 

— transaction type identifier; 

— card terminal number; 

35 — transaction date (computer); 
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— transaction time (computer). 

With the same mechanism, the IC card also makes a transaction signature TAC 
by using the transaction authentication encryption key DTK directly. TAC will be 
written into the transaction itemized list of the card terminal to be transferred to the 
5 computer later for transaction authentication. The following are the main elements 
for making TAC: 

— transaction amount; 

— transaction type identifier; 

— card terminal number (the card terminal which issues DEBIT FOR REFUEL 
10 command); 

— card terminal transaction sequence number (the card terminal which issues 
DEBIT FOR REFUEL command); 

— transaction date (the card terminal which issues DEBIT FOR REFUEL 
command); 

15 - — transaction time (the card terminal which issues DEBIT FOR REFUEL 

command). 

The IC card will use the following data to form a record for updating the 
transaction itemized list. 

— off-line transaction sequence number of refueling electronic deposit; 
20 — transaction amount; 

— transaction type identifier; 

— card terminal number (the card terminal which issues DEBIT FOR REFUEL 
command); 

— transaction date (the card terminal which issues DEBIT FOR REFUEL 
25 command); 

— transaction time (the card terminal which issues DEBIT FOR REFUEL 
command). 

Step 1.15 Authenticating MAC4. 
30 After receiving MAC4 from the IC card (through the card terminal), PSAM 

authenticates MAC4 validation, and the result is transferred to the card terminal to 
allow necessary measures to be taken. 

35 2. On-line unlocking grey transaction 
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The on-line unlocking grey transaction allows a cardholder to unlock a grey lock 
card (recovering to normal state) and supplementary debit simultaneously. This 
transaction must be made on an on-line card terminal and the cardholder must propose 
a PIN. Reference to Fig. 2. 

In Step 2.1 the card terminal issues an INITIALIZE FOR UNLOCK command to 
start refueling transaction. 

In Step 2.2 after the IC card has received the INITIALIZE FOR UNLOCK 
command, it deals with this command, including the steps: 

(1) check whether the IC card is at grey lock state, if it is not, then returns state 
code "6901" (illegal command) without any other data; 

(2) check whether the encryption key index included in the command is 
supported by IC card, if it is not supported, then returns state code "9403" 
(unsupported encryption key index) without any other data; 

(3) after passing above checks, the IC card will make a pseudo random number 
ICC, a procedure encryption key SESULKK and a message authentication code 
MAC1 for the computer to check whether the unlocking grey transaction and the IC 
card are legal. The procedure encryption key SESULKK is made by unlocking grey 
encryption key DULKK with the same mechanism of making consumption encryption 
key and used for unlocking grey transaction. Inputting data for making procedure 
encryption key SESULKK are as following: 

SESULKK: pseudo random number ICC || transaction sequence number of 
refueling electronic deposit || "8000". 

SESULKK works with the following data in sequence to calculate MAC1: 

— balance of refueling electronic deposit; 

— transaction type identifier ("11" for unlocking grey transaction); 

— card terminal number. 

The IC card sends the response message of the INITIALIZE FOR UNLOCK 
command to the card terminal for processing. If the returning state is not "9000", then 
the card terminal will stop the transaction. 

After receiving the response message of the INITIALIZE FOR UNLOCK 
command, the card terminal sends an allowance request message, including data 
shown in table 17, of unlocking grey to the card distributor computer. 
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10 



Step 2.3 Authenticating MAC1 

The Computer makes SESULKK and checks whether MAC1 is valid, if it is 
valid, then executes step 2.5, otherwise executes step 2.4. 

Step 2.4 returning error state 

When there are conditions that cannot be accepted by the unlocking grey 
transaction, the computer will inform the card terminal and the card terminal should 
take necessary measures to deal with the same. 



Step 2.5 Computer processing 

After confirming that the load transaction can be made, the computer makes a 
message authentication code MAC2 for checking whether the computer is legal by the 
IC card. SESULKK works with the following data in sequence to calculate MAC2: 
15 — supplementary debit amount of transaction; 

— transaction type identifier; 

— card terminal number; 

— transaction date (computer); 

— transaction time (computer). 

20 The computer sends an unlocking transaction accepted message to the card 

terminal, including MAC2, transaction date (computer) and transaction time 
(computer). 

In Step 2.6 when the card terminal has received the unlocking transaction 
25 accepted message from the computer, the card terminal will send a DEBIT FOR 

UNLOCK command to the IC card to update the balance of the refueling electronic 
deposit and to return the refueling electronic deposit to its normal state. 

Step 2.7 authenticating MAC2 
30 After receiving the DEBIT FOR UNLOCK command, the IC card authenticates 

whether MAC2 is valid. If it is valid, the transaction executes step 2.8 continually, 
otherwise an error statement "9302" (MAC invalid) is sent back to the card terminal. 

Step 2.8 transaction processing 
35 The IC card subtracts the supplementary debit amount of the transaction from the 

balance of the refueling electronic deposit on the card, increments the on-line 
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transaction sequence number of the refueling electronic deposit, and recovers the 
refueling electronic deposit state from grey lock to normal. The IC card must perform 
all of the steps above completely or without performing any one step. If the balance 
or the sequence number or the refueling electronic deposit state are updated 
unsuccessfully, then the transaction itemized list also should not be updated. The IC 
card makes a message authentication code MAC3 for checking whether the IC card is 
legal by the computer. MAC3 is included in the response message of the DEBIT 
FOR UNLOCK command transferred from the card to the computer (through the card 
terminal). SESULKK works with the following data to calculate MAC3: 

— balance of refueling electronic deposit; 

— on-line transaction sequence number of refueling electronic deposit (before 
increment); 

— supplementary debit amount; 

— transaction type identifier; 

— card terminal number; 

— transaction date (computer); 

— transaction time (computer). 

The IC card also makes a transaction signature TAC by using the transaction 
authentication encryption key DTK directly with the same mechanism. TAC will be 
written into the card terminal transaction itemized list for transferring to a computer 
later to authenticate the transaction. The following are the main elements for making 
TAC: 

— balance of refueling electronic deposit; 

— on-line transaction sequence number of refueling electronic deposit (before 
increment); 

— supplementary debit amount; 

— transaction type identifier; 

— card terminal number; 

— transaction date (computer); 

— transaction time (computer). 

The IC card uses the following data to form a record for updating the transaction 
itemized list: 

— on-line transaction sequence number of refueling electronic deposit; 

— supplementary debit amount; 
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10 



15 



— transaction type identifier; 
card terminal number; 

— transaction date (computer); 

— transaction time (computer). 

Step 2.9 authenticating MAC3 

When MAC3 from the IC card (through the card terminal) has been received, 
validation of MAC3 should be authenticated. If it is valid, then step 2.10 will be 
executed, otherwise the computer will send an error message to the card terminal. 

Step 2.10 returning acknowledgement 

When step 2.9 has been successfully completed, the computer takes 
corresponding processing. 



3. Local unlocking grey transaction 

The local unlocking grey transaction allows the cardholder to make a 
supplementary debit and to unlock grey (recovering to normal state). This transaction 
must be done on the card terminal that has the escape card record of the last time. 
20 The cardholder must propose a PIN to perform the unlock grey transaction. Reference 
to Fig. 3. 

In Step 3.1 the card terminal issues a GET GREY STATUS command to launch 
the local unlock grey transaction. 

25 

In Step 3.2 when the IC card has received the GET GREY STATUS command, 
the IC card sends grey mark state (Grey flag) of the electronic deposit, the balance of 
the electronic deposit, the on-line transaction sequence number of the electronic 
deposit, the off-line transaction sequence number of the electronic deposit, MAC3 and 
30 TAC when locking to the card terminal through the GET GREY STATUS command 
response message. 

Step 3.3 authenticating MAC3 

When the card terminal has confirmed that the electronic deposit of the IC card is 
35 in a grey lock state, it will compare the MAC3 received with the MAC3 on the escape 
card record. 
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Step 3.4 card terminal issues a DEBIT FOR REFUEL command. 



Step 3.5 authenticating GMAC 

After receiving the DEBIT FOR REFUEL command, the IC card authenticates 
5 whether the off-line transaction sequence number of the IC card CTC submitted by 
the card terminal is matched. If it is unmatched, returns directly without affecting 
error counter. 

The IC card should authenticate validation of GMAC. If it is valid, transaction 
processing will continue to step 3.6, otherwise an error statement "9302" (MAC is 
10 invalid) will be sent back to the card terminal. At the same time, the IC card internal 
error counter decrements. If the error counter is zero, the IC card is locked 
permanently in order to prevent misuse. 

SESPK works with the following datum to calculate GMAC: 

— refueling transaction amount. 

15 

Step 3.6 transaction processing 

The IC card subtracts the refueling transaction amount from the refueling 
electronic deposit balance on the card, and recovers from the grey lock state to the 
normal state. The IC card must perform all of these steps above completely or 
20 without performing any one step. If the balance or the refueling electronic deposit 
state are updated unsuccessfully, then the transaction itemized list also should not be 
updated. 

The IC card makes a message authentication code MAC4 for PS AM to check 
whether the IC card is legal. MAC4 is included in the response message of the 
25 DEBIT FOR REFUEL command sent from the card to PS AM (through the card 

terminal) as an input for MAC4 calculation. DPK works on the following datum to 
calculate MAC4: 

— refueling transaction amount. 

The IC card also makes a transaction signature TAC by using the transaction 
30 authentication encryption key DTK directly with the same mechanism. TAC will be 
written into the card terminal transaction itemized list for transferring to a computer 
later to authenticate the transaction. The following are the main elements for making 
TAC: 

— transaction amount; 
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— transaction type identifier; 

— card terminal number (the card terminal which issues DEBIT FOR REFUEL 
command); 

— card terminal transaction sequence number (the card terminal which issues 
DEBIT FOR REFUEL command); 

— transaction date (the card terminal which issues DEBIT FOR REFUEL 
command); 

— transaction time (the card terminal which issues DEBIT FOR REFUEL 
command). 

The IC card uses the following data to form a record for updating the transaction 
itemized list: 

— off-line transaction sequence number of refueling electronic deposit; 

— transaction amount; 

— transaction type identifier; 

— card terminal number (the card terminal which issues DEBIT FOR REFUEL 
command); 

— transaction date (the card terminal which issues DEBIT FOR REFUEL 
command); 

— transaction time (the card terminal which issues DEBIT FOR REFUEL 
command). 

Step 3.7 authenticating MAC4 

After receiving MAC4 from the IC card (through the card terminal), PSAM 
would authenticate MAC4 validation. The result of authentication is sent to the card 
terminal for taking any necessary measures. 

In the application of refueling electronic deposit, metadata definition includes: 

1. transaction type identifier: 

10 — refueling 

1 1 — unlock grey 

12 — local unlock grey 

other transaction type identifiers are same as state-of-the-art. 

2. encryption key relationship: 
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special encryption keys used for refueling electronic deposit are all double length 
DEA encryption key (128 bits). 



Encryption key 


Card distributor 
bank 


IC card 


POS. (PSAM) 


Encryption key used 
for unlocking 
transaction 


Unlock grey 
encryption main key 
(MULKK) 


Unlock encryption 
sub-key (DULKK) 


N/A 



5 Other encryption key relationship refers to state-of-the-art definition. 



IC card internal changes includes: 

1. Each refueling electronic deposit has a corresponding internal file used for 
storing a pseudo random number ICC, a card terminal number, a card terminal 

10 transaction sequence number, a transaction date, a transaction time and MAC2 at grey 
lock state. The internal file is kept when the power supply of the IC card is 
interrupted for recovery. 

2. Operating refueling electronic deposit 

When the IC card has received a command for refueling electronic deposit, 
15 internal operations needed are: 

— check whether the refueling electronic deposit is at grey lock state, if it is 
not, enter idle state; 

— if it is at grey lock state, from internal file the IC card recovers pseudo 
random number ICC, card terminal number, card terminal transaction sequence 

20 number, transaction date, transaction time and MAC2 at last locking; and recovers 
procedure encryption key SESPK with the same mechanism of recovering data. 

Many modifications and other embodiments of the invention will come to 
mind to one skilled in the art to which this invention pertains having the benefit of the 
teachings presented in the foregoing descriptions and the associated drawings. 

25 Therefore, it is to be understood that the invention is not to be limited to the specific 
embodiments disclosed and that modifications and other embodiments are intended to 
be included within the scope of the appended claims. Although specific terms are 
employed herein, they are used in a generic and descriptive sense only and not for 
purposes of limitation. 
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